PPHA-369: Include CSRF_TRUSTED_ORIGINS to terraform env vars

Author: Themitchell

infrastructure/modules/container-apps/main.tf

@@ -24,7 +24,8 @@ module "webapp" {
   environment_variables = merge(
     local.common_env,
     {
-      ALLOWED_HOSTS = "${var.app_short_name}-web-${var.environment}.${var.default_domain}"
+      ALLOWED_HOSTS        = "${var.app_short_name}-web-${var.environment}.${var.default_domain}"
+      CSRF_TRUSTED_ORIGINS = "https://${var.app_short_name}-web-${var.environment}.${var.default_domain}"
     },
     var.deploy_database_as_container ? local.container_db_env : local.azure_db_env
   )

lung_cancer_screening/settings.py

@@ -19,6 +19,11 @@ def boolean_env(key, default=None):
     value = environ.get(key)
     return default if value is None else value in ("True", "true", "1")
 
+def list_env(key):
+    value = environ.get(key)
+    return value.split(",") if value else []
+
+
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent
 
@@ -32,9 +37,8 @@ def boolean_env(key, default=None):
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = boolean_env("DEBUG", default=False)
 
-allowed_hosts = environ.get("ALLOWED_HOSTS")
-ALLOWED_HOSTS = allowed_hosts.split(",") if allowed_hosts else []
-
+ALLOWED_HOSTS = list_env("ALLOWED_HOSTS")
+CSRF_TRUSTED_ORIGINS = list_env("CSRF_TRUSTED_ORIGINS")
 
 # Application definition